Panorama API - get content of dynamic address group

T.Boess — Thu, 18 Dec 2025 10:38:49 GMT

Hi, I'd like to list the actual content (e.g. IP addresses) of a dynamic address group (e.g. cisco plugin for Cisco ACI). However, I did not find an API call (neither REST nor XML) to achieve this purpose.

Regards

Tilmann

Re: Panorama API - get content of dynamic address group

TomYoung — Fri, 19 Dec 2025 18:44:57 GMT

Hi @T.Boess ,

You cannot see the members of a DAG on Panorama. The NGFW does not send that dynamic information to it. If you click on more... under Device Groups > Objects > Address Groups on Panormama, you will only see static entries (if they exist). The same menu on the NGFW will show the members.

The API for the NGFW is below:

https://yourfirewall/api/?type=op&cmd=<show><object><dynamic-address-group><name>yourdag</name></dynamic-address-group></object></show>

Thanks,

Tom

topic Re: Panorama API - get content of dynamic address group in Panorama Discussions

Panorama API - get content of dynamic address group

Re: Panorama API - get content of dynamic address group